$ rpki-client -vvvf rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft File: E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft (raw, json) Hash identifier: v6E4+1827exjA2gHu/fIpaoSRipf66Hmzb+MFMM+GJM= Subject key identifier: 6A:A8:C1:96:64:6C:76:1C:31:08:47:25:D4:61:FB:7E:60:77:10:DD Authority key identifier: E0:69:CB:FD:23:4F:1A:B4:E5:40:FE:D5:E8:E3:A1:6D:0F:29:87:A5 Certificate issuer: /CN=E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5 Certificate serial: 29DEEC0D54A8F533EEA03BEC0B90AEAA3A561A00 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft Manifest number: B9 Signing time: Thu 24 Sep 2026 07:44:12 +0000 Manifest this update: Thu 24 Sep 2026 07:39:12 +0000 Manifest next update: Fri 25 Sep 2026 11:27:12 +0000 Files and hashes: 1: E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.crl (hash: SKnmklZE3c5ZlT1BF/quo58Pmsc5+8NlLRHJv/bYj0E=) 2: 3130332e3133362e3231302e302f32332d3234203d3e20313334383233.roa (hash: ORlTefciXfs7B8j/V1m0IX5sH4O69987zDEATqKs4Vg=) 3: 3130332e3133362e3231302e302f32332d3234203d3e203137353032.roa (hash: iW1ZLD2xVMVzTgjKNYmVbGt8qDm7cZnk4mm0FDu/bKA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.crl rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:de:ec:0d:54:a8:f5:33:ee:a0:3b:ec:0b:90:ae:aa:3a:56:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5 Validity Not Before: Sep 24 07:39:12 2026 GMT Not After : Sep 25 11:27:12 2026 GMT Subject: CN=6AA8C196646C761C31084725D461FB7E607710DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2a:03:9a:24:05:85:be:f2:c8:a8:67:e8:0e: 0f:60:21:9b:ce:87:ca:77:b6:62:92:d7:41:21:67: 58:d8:c3:46:f8:64:e7:70:f9:03:c1:7f:ae:4c:13: 04:1a:41:fd:fb:0f:88:fc:1b:af:7c:7c:da:0a:a7: e6:a6:da:bc:ba:d5:e7:66:63:48:2e:92:e3:aa:7b: 35:04:94:5f:35:b2:7e:54:e0:d2:cc:e5:20:cd:76: e6:9e:a1:24:08:27:79:ba:b2:df:85:7a:15:f9:60: c6:33:41:16:22:68:4c:c6:8d:14:63:79:22:99:3b: e7:2f:44:76:d9:04:bd:c9:9e:07:7d:00:8e:4e:18: 0b:aa:76:7e:de:5a:96:2e:95:40:2b:6c:3a:5a:91: 3c:af:16:f2:f7:3c:72:65:ef:62:fa:d0:4c:3f:8c: c7:6a:e8:e6:46:c6:7b:96:8f:cf:84:e8:ff:6b:29: ba:74:3d:43:03:66:97:cc:e1:4b:cd:fb:90:5e:3e: c2:27:8c:63:9b:1b:0a:8c:a1:ee:38:89:41:95:86: 01:a4:8a:dd:51:eb:37:e9:c0:9c:bd:88:c4:3b:fc: 02:2e:75:99:93:66:b5:e4:6b:d9:01:a9:71:12:d5: 56:a4:78:d8:aa:d5:90:bc:d6:b4:f0:98:57:1f:63: 45:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A8:C1:96:64:6C:76:1C:31:08:47:25:D4:61:FB:7E:60:77:10:DD X509v3 Authority Key Identifier: keyid:E0:69:CB:FD:23:4F:1A:B4:E5:40:FE:D5:E8:E3:A1:6D:0F:29:87:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:91:7f:c9:c2:bf:18:19:41:0b:ea:c1:97:73:c4:3a:0b:2c: 4a:2d:87:e3:3f:e1:33:6e:84:2c:b5:f1:65:2f:0a:ee:45:db: 3c:d2:59:eb:bf:da:d0:1a:20:34:c3:78:69:6d:03:bd:39:ad: b1:67:2f:2d:0b:bb:14:ff:a9:e5:8c:3d:01:9e:93:7c:6c:0d: 0c:e5:6b:9f:bc:35:d8:0c:83:8a:55:45:15:7d:24:40:37:47: c9:29:72:bb:eb:99:73:0c:bc:f0:bb:2c:92:3e:1a:a2:df:39: e0:ed:fe:51:a8:f7:97:8b:24:4d:c8:36:68:9f:e4:6c:4a:de: b9:0f:80:9d:dd:9c:d7:02:4c:80:6e:f8:94:af:ee:66:e6:c7: 0b:58:6e:df:62:88:e7:b9:b7:1f:69:ca:3f:f1:2e:52:4e:10: f6:b9:3a:83:4f:0a:0e:70:e4:fb:40:f8:5a:f8:a1:0c:a4:60: 59:69:86:dd:7d:bb:83:50:b6:1e:e6:d1:8b:e4:ae:ec:12:c0: 73:96:fd:4a:53:be:09:66:89:b5:87:cf:c2:2c:86:52:74:b4: a1:85:ab:ea:e4:54:20:a0:e3:d4:fa:3e:32:0c:48:2e:b1:46: 12:ae:e7:6f:b7:56:e8:53:c1:2d:96:6e:72:cb:4e:bb:f5:33: 45:07:73:80 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUKd7sDVSo9TPuoDvsC5CuqjpWGgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA2OUNCRkQyMzRGMUFCNEU1NDBGRUQ1RThFM0ExNkQw RjI5ODdBNTAeFw0yNjA5MjQwNzM5MTJaFw0yNjA5MjUxMTI3MTJaMDMxMTAvBgNV BAMTKDZBQThDMTk2NjQ2Qzc2MUMzMTA4NDcyNUQ0NjFGQjdFNjA3NzEwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPKgOaJAWFvvLIqGfoDg9gIZvO h8p3tmKS10EhZ1jYw0b4ZOdw+QPBf65MEwQaQf37D4j8G698fNoKp+am2ry61edm Y0gukuOqezUElF81sn5U4NLM5SDNduaeoSQIJ3m6st+FehX5YMYzQRYiaEzGjRRj eSKZO+cvRHbZBL3Jngd9AI5OGAuqdn7eWpYulUArbDpakTyvFvL3PHJl72L60Ew/ jMdq6OZGxnuWj8+E6P9rKbp0PUMDZpfM4UvN+5BePsInjGObGwqMoe44iUGVhgGk it1R6zfpwJy9iMQ7/AIudZmTZrXka9kBqXES1VakeNiq1ZC81rTwmFcfY0U3AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUaqjBlmRsdhwxCEcl1GH7fmB3EN0wHwYDVR0j BBgwFoAU4GnL/SNPGrTlQP7V6OOhbQ8ph6UwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS1VBTkdT SElILzAvRTA2OUNCRkQyMzRGMUFCNEU1NDBGRUQ1RThFM0ExNkQwRjI5ODdBNS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9FMDY5Q0JGRDIzNEYxQUI0RTU0MEZFRDVF OEUzQTE2RDBGMjk4N0E1LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS1VBTkdTSElILzAvRTA2OUNC RkQyMzRGMUFCNEU1NDBGRUQ1RThFM0ExNkQwRjI5ODdBNS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGaR f8nCvxgZQQvqwZdzxDoLLEoth+M/4TNuhCy18WUvCu5F2zzSWeu/2tAaIDTDeGlt A705rbFnLy0LuxT/qeWMPQGek3xsDQzla5+8NdgMg4pVRRV9JEA3R8kpcrvrmXMM vPC7LJI+GqLfOeDt/lGo95eLJE3INmif5GxK3rkPgJ3dnNcCTIBu+JSv7mbmxwtY bt9iiOe5tx9pyj/xLlJOEPa5OoNPCg5w5PtA+Fr4oQykYFlpht19u4NQth7m0Yvk ruwSwHOW/UpTvglmibWHz8IshlJ0tKGFq+rkVCCg49T6PjIMSC6xRhKu52+3VuhT wS2WbnLLTrv1M0UHc4A= -----END CERTIFICATE-----Generated at Fri Sep 25 04:11:10 2026 by rpki-client